THREAT OPS › Threat News › [NVD] CVE-2026-17059 (MEDIUM 6.5) — A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when l
[NVD] CVE-2026-17059 (MEDIUM 6.5) — A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when l
CVE-2026-17059 CVSS: 6.5 MEDIUM Published: 2026-07-24T15:17:13.300
A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of a role. This allows a restricted a
MITRE ATT&CK techniques
- Email AddressesT1589.002
Indicators of compromise
- CVE-2026-17059cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-17059